From f30a612ea9e5cdd12b548bd7a7296c751b65f3f3 Mon Sep 17 00:00:00 2001
From: Stefan McShane <stefanmcshane@users.noreply.github.com>
Date: Thu, 9 Jan 2025 16:33:39 -0500
Subject: [PATCH] Allow IP forwarding by default on tailscale addon

---
 addons/tailscale-relay/templates/statefulset.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/addons/tailscale-relay/templates/statefulset.yaml b/addons/tailscale-relay/templates/statefulset.yaml
index f9df730e6..0f88cd5ce 100644
--- a/addons/tailscale-relay/templates/statefulset.yaml
+++ b/addons/tailscale-relay/templates/statefulset.yaml
@@ -39,6 +39,12 @@ spec:
       {{- if .Values.rbac.enabled }}
       serviceAccountName: {{ template "exporter.serviceAccountName" . }}
       {{- end }}
+      initContainers:
+      - args:
+        - -c
+        - sysctl -w net.ipv4.ip_forward=1 net.ipv6.conf.all.forwarding=1
+        command:
+        - /bin/sh
       containers:
         - name: {{ .Chart.Name }}
           image: {{ .Values.image.repository }}:{{ default .Chart.AppVersion .Values.image.tag }}